Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File:                     ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier:          3gfOqWJfWrFL5FQ8NDK7nEHc7cCCV+56wz3ZPtUlmSg=
Subject key identifier:   A1:B7:3B:77:BF:9E:7C:5E:41:33:45:B7:95:2F:80:82:1E:45:5B:A8
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer:       /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial:       019EE3678739D324D7D01127739E868EC2C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number:          1971
Signing time:             Sat 20 Jun 2026 05:01:13 +0000
Manifest this update:     Sat 20 Jun 2026 05:01:13 +0000
Manifest next update:     Sun 21 Jun 2026 05:01:13 +0000
Files and hashes:         1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: /Q9GrwA2HTfEWFzXouPCFjYZrAFZoLQIFvko9WEdKB8=)
                          2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e3:67:87:39:d3:24:d7:d0:11:27:73:9e:86:8e:c2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
        Validity
            Not Before: Jun 20 05:01:13 2026 GMT
            Not After : Jun 21 05:01:13 2026 GMT
        Subject: CN=a1b73b77bf9e7c5e413345b7952f80821e455ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:e3:6a:05:e3:bd:06:e1:64:62:fe:16:4f:
                    e7:e8:e1:ee:33:b0:e7:5b:1e:02:26:e7:1a:21:14:
                    d3:d8:1c:26:4e:f7:22:8c:e5:64:eb:31:75:97:81:
                    dd:fe:e5:2a:3c:25:cf:18:3a:fa:58:98:98:6d:6d:
                    46:a8:7c:6f:fe:bb:32:2d:fd:c9:60:ac:a7:44:72:
                    8b:2a:a8:6d:ae:fe:42:96:bb:de:a7:b6:e1:f3:95:
                    2e:6a:fe:02:ff:a8:88:ea:0a:bd:1d:b9:b7:b1:cb:
                    54:5c:b8:3f:3e:2e:c3:b7:a0:f8:31:db:8f:40:dc:
                    bb:62:f4:e7:a4:c9:ba:2a:d6:e8:c0:98:c1:1e:3e:
                    86:f9:5c:b4:8c:54:85:e5:10:fb:f3:4c:15:06:9a:
                    3e:91:7f:a3:8d:08:94:16:e2:e2:4c:e8:f2:47:8c:
                    f6:e9:ab:79:51:dd:a9:3d:a1:20:75:07:c1:59:bf:
                    b8:5c:56:e7:6b:24:4b:83:46:c4:df:55:2e:a7:4a:
                    d3:66:50:0a:1d:13:82:f2:c1:ba:c0:c0:4e:e5:4c:
                    91:05:95:7a:0a:2b:75:e5:73:83:f9:48:62:5c:22:
                    9a:d8:d2:d9:dd:3d:7e:7f:a3:fc:0d:71:94:89:08:
                    ef:39:23:bb:60:54:de:f7:bc:9e:34:39:6f:56:05:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B7:3B:77:BF:9E:7C:5E:41:33:45:B7:95:2F:80:82:1E:45:5B:A8
            X509v3 Authority Key Identifier:
                keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:c8:2b:63:4c:f9:42:c6:b9:5a:ab:b6:67:98:81:13:b9:6a:
         a3:10:ed:6d:ac:3b:b2:65:d4:43:c9:f9:aa:81:68:51:d6:59:
         bc:30:f5:77:37:4b:20:15:fb:1f:4e:20:97:23:4e:98:d5:35:
         f6:32:f9:41:78:6a:b8:3d:b0:08:e3:18:fe:22:52:da:53:29:
         a1:29:22:09:07:cc:22:a8:51:42:75:31:88:1e:4a:45:16:07:
         dc:99:94:e3:e9:42:54:55:0d:20:7d:f9:ca:73:9d:cc:31:f7:
         12:16:a7:39:ce:64:2c:65:54:7c:ca:fc:93:62:0a:b4:4c:8c:
         e9:6b:82:b5:40:31:90:53:df:1a:58:6a:04:aa:ac:0a:85:b9:
         29:24:fb:92:83:a6:06:5f:d4:0c:57:db:df:59:2a:32:7b:06:
         0a:63:a6:ba:92:e4:27:b8:4a:9a:a7:a8:17:0d:e6:59:dc:b1:
         e1:49:a8:f7:d3:ea:43:cf:3c:14:37:dd:df:fe:de:5b:81:6a:
         56:a6:91:3a:65:76:6b:a0:26:2e:b5:b1:7e:c4:11:c1:a0:98:
         61:d1:3e:ce:1b:4c:0e:7d:8d:f5:a2:56:5d:d3:c1:42:4d:2e:
         c0:9b:c1:d0:57:ed:48:62:08:c6:22:10:b5:e8:43:19:fc:54:
         01:f3:52:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:45:06 2026 by rpki-client